Leaver Process
The Leaver Process is the controlled sequence of actions used to revoke access when a person leaves the organization or no longer requires access.
Definition
The Leaver Process is the defined operational and governance workflow for handling departures, contract endings, access removals, or affiliation changes that require identity retirement or access withdrawal. It typically includes receipt of the termination event, validation of timing, disabling of primary accounts, revocation of application access, removal of privileged access, token invalidation, session termination, mailbox or data transfer handling, badge or device return coordination, and audit logging. In mature IAM programs, leaver processing is time-sensitive, prioritized, and integrated with HR and security operations. It is one of the most scrutinized lifecycle processes in security assessments and audits.
Why it matters
A strong leaver process is essential for reducing the window during which ex-employees or former third parties retain access.
The Ariovis perspective
Ariovis promotes automation that remains explainable and recoverable: explicit rules, approvals where needed, logs, error handling and recovery mechanisms.
Related services
Common pitfalls
- A frequent issue is relying on manual notifications or delayed upstream termination data, causing revocation to happen too late.
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.